This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/SiyGN2LOnZltKrq27eGSnM7ctjI.mft File: SiyGN2LOnZltKrq27eGSnM7ctjI.mft (raw, json) Hash identifier: iTI2oPPcWfG5qoKTVDWjav2hgFYbOczPxrbd7M2IUzs= Subject key identifier: FF:A8:C3:92:E0:F5:65:45:95:13:99:88:A9:EB:55:0D:12:A0:C9:40 Authority key identifier: 4A:2C:86:37:62:CE:9D:99:6D:2A:BA:B6:ED:E1:92:9C:CE:DC:B6:32 Certificate issuer: /CN=4a2c863762ce9d996d2abab6ede1929ccedcb632 Certificate serial: 019AF31C4F404C57BABC289CA67454A33949 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SiyGN2LOnZltKrq27eGSnM7ctjI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/SiyGN2LOnZltKrq27eGSnM7ctjI.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 10:01:50 +0000 Manifest this update: Sat 06 Dec 2025 10:01:50 +0000 Manifest next update: Sun 07 Dec 2025 10:01:50 +0000 Files and hashes: 1: HSzy_sdTpMM9eJp_2_sbD1IEYy0.roa (hash: ieQeEh5XwIx3cGbKm9ddEXjqNduJq3qUmYGe9bdZpCY=) 2: SiyGN2LOnZltKrq27eGSnM7ctjI.crl (hash: u/NjT0+38FxN8ih0v/p0pGmPwzZOoTNBRc8e0+W52ig=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/SiyGN2LOnZltKrq27eGSnM7ctjI.crl rsync://rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/SiyGN2LOnZltKrq27eGSnM7ctjI.mft rsync://rpki.ripe.net/repository/DEFAULT/SiyGN2LOnZltKrq27eGSnM7ctjI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:4f:40:4c:57:ba:bc:28:9c:a6:74:54:a3:39:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a2c863762ce9d996d2abab6ede1929ccedcb632 Validity Not Before: Dec 6 10:01:50 2025 GMT Not After : Dec 7 10:01:50 2025 GMT Subject: CN=ffa8c392e0f5654595139988a9eb550d12a0c940 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9c:be:dc:75:8d:08:89:41:c3:8b:d9:82:6a: 6c:65:6d:cb:0a:ec:b2:ba:cf:f7:3b:55:f3:4f:69: 34:1f:8b:45:db:d8:83:7b:c2:e6:ae:aa:42:2e:34: 5e:b6:e4:42:7e:dd:11:a3:3d:be:34:f2:34:84:ad: 44:29:9a:14:08:29:69:40:35:b7:cf:1f:59:df:62: 21:9c:4e:8b:35:25:aa:d5:2d:b2:2d:ae:1d:34:89: b5:65:23:4d:ce:b8:7d:8b:88:1d:6e:fd:2a:49:74: c8:d5:fc:7e:fe:34:08:61:1c:3b:c9:a9:0f:93:09: 3a:78:a6:83:02:41:83:b3:5c:49:2b:3f:14:fe:73: e3:69:53:4f:6d:7d:c6:1e:c0:1e:09:0b:d0:b2:63: cc:3b:b0:4d:ce:f2:ab:ca:8a:96:06:ce:07:dc:00: 3d:4a:c2:ef:0d:e0:d9:19:36:0f:f0:86:ff:ac:6c: 3d:38:ea:55:c4:f1:af:ff:5f:ba:30:29:5a:3e:36: 26:ba:8a:d2:04:f6:6a:a2:ea:5d:11:be:02:95:ba: a9:e0:93:8e:5e:81:5f:b6:96:9a:dd:74:6f:70:c5: b6:0d:df:1f:b8:a3:ab:f9:96:6c:65:4a:62:1d:c1: a7:0d:d3:f3:6c:b3:a0:36:3d:eb:f4:71:0d:24:da: 79:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:A8:C3:92:E0:F5:65:45:95:13:99:88:A9:EB:55:0D:12:A0:C9:40 X509v3 Authority Key Identifier: keyid:4A:2C:86:37:62:CE:9D:99:6D:2A:BA:B6:ED:E1:92:9C:CE:DC:B6:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SiyGN2LOnZltKrq27eGSnM7ctjI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/SiyGN2LOnZltKrq27eGSnM7ctjI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/SiyGN2LOnZltKrq27eGSnM7ctjI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:14:80:15:63:75:d2:af:ea:ba:02:3d:2f:7f:1c:02:a0:f3: 80:d8:0b:48:4d:6f:ee:53:31:e4:66:1e:b7:19:4c:53:09:39: f5:71:94:52:26:85:ed:6d:f4:d8:4f:2d:03:68:d3:01:e3:93: d6:1a:39:f4:62:aa:c1:a6:55:bb:53:81:9a:9d:a2:b7:c1:8c: fa:18:bc:08:65:6a:f7:41:41:8e:d1:a8:2b:e6:78:42:a3:50: 2e:39:71:51:8b:18:4b:62:39:2b:4a:14:0d:bf:64:f0:e2:fd: ae:32:60:80:44:41:1f:19:f6:57:44:7e:23:ff:56:0d:e6:1e: dc:57:82:8a:f7:61:39:b0:74:e9:8f:69:66:8c:16:55:39:20: e0:7a:f7:f5:df:7b:7b:df:4e:5b:5f:80:0e:4b:9c:cb:74:d0: 45:0f:13:91:f6:1d:73:6c:12:ad:05:bf:8a:ba:c1:d5:ed:5a: 11:bc:ef:c4:b5:3c:11:79:dc:9f:94:f5:1d:c0:dd:a8:65:f7: dc:6c:cd:6c:5d:de:9b:95:54:87:dc:79:24:03:e6:be:69:b8: 31:66:e4:42:80:2d:2c:b0:0a:17:9b:4c:d2:86:e0:74:af:9e: a3:60:4e:20:e0:e4:72:bb:fc:53:24:b1:d1:22:64:7c:04:b7: 3a:e1:c5:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHE9ATFe6vCicpnRUozlJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhMmM4NjM3NjJjZTlkOTk2ZDJhYmFiNmVkZTE5MjljY2Vk Y2I2MzIwHhcNMjUxMjA2MTAwMTUwWhcNMjUxMjA3MTAwMTUwWjAzMTEwLwYDVQQD EyhmZmE4YzM5MmUwZjU2NTQ1OTUxMzk5ODhhOWViNTUwZDEyYTBjOTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5y+3HWNCIlBw4vZgmpsZW3LCuyy us/3O1XzT2k0H4tF29iDe8LmrqpCLjRetuRCft0Roz2+NPI0hK1EKZoUCClpQDW3 zx9Z32IhnE6LNSWq1S2yLa4dNIm1ZSNNzrh9i4gdbv0qSXTI1fx+/jQIYRw7yakP kwk6eKaDAkGDs1xJKz8U/nPjaVNPbX3GHsAeCQvQsmPMO7BNzvKryoqWBs4H3AA9 SsLvDeDZGTYP8Ib/rGw9OOpVxPGv/1+6MClaPjYmuorSBPZqoupdEb4Clbqp4JOO XoFftpaa3XRvcMW2Dd8fuKOr+ZZsZUpiHcGnDdPzbLOgNj3r9HENJNp5HwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP+ow5Lg9WVFlROZiKnrVQ0SoMlAMB8GA1UdIwQY MBaAFEoshjdizp2ZbSq6tu3hkpzO3LYyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2l5R04yTE9uWmx0S3JxMjdlR1NuTTdjdGpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC83YThlM2MtY2MwMi00MjU1LTk4OTIt YzQ3MTg0ZmRhYzM5LzEvU2l5R04yTE9uWmx0S3JxMjdlR1NuTTdjdGpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC83YThlM2MtY2MwMi00MjU1LTk4OTItYzQ3MTg0ZmRhYzM5 LzEvU2l5R04yTE9uWmx0S3JxMjdlR1NuTTdjdGpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZhSAFWN1 0q/qugI9L38cAqDzgNgLSE1v7lMx5GYetxlMUwk59XGUUiaF7W302E8tA2jTAeOT 1ho59GKqwaZVu1OBmp2it8GM+hi8CGVq90FBjtGoK+Z4QqNQLjlxUYsYS2I5K0oU Db9k8OL9rjJggERBHxn2V0R+I/9WDeYe3FeCivdhObB06Y9pZowWVTkg4Hr39d97 e99OW1+ADkucy3TQRQ8TkfYdc2wSrQW/irrB1e1aEbzvxLU8EXncn5T1HcDdqGX3 3GzNbF3em5VUh9x5JAPmvmm4MWbkQoAtLLAKF5tM0obgdK+eo2BOIODkcrv8UySx 0SJkfAS3OuHFbg== -----END CERTIFICATE-----Generated at Sat Dec 6 18:50:18 2025 by rpki-client